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Claims 

[d] l. A method to distribute policies, comprising: 

transmitting one of an identification (ID) assigned to a 
policy template or the policy template associated with 
each policy to an enforcement point or selected enforce- 
ment points for enforcement; and 
transmitting one set of parameters to be used in each 
policy template to the enforcement point or selected en- 
forcement points. 

[c2] 2. The method of claim 1, binding the parameters to 
each associated policy template. 

[c3] 3. The method of claim 2, further comprising imple- 
menting the policy associated with each policy template. 

[c4] 4. The method of claim 1, further comprising transmit- 
ting a query in response to each policy template corre- 
sponding to any transmitted IDs not present at the en- 
forcement point or any of the selected enforcement 
points. 

[c5] 5. The method of claim 1, further comprising transmit- 
ting any policy templates to the enforcement point or 
any of the selected enforcement points in response to a 



query from the enforcement point or any of the selected 
enforcement points including any IDs assigned to the 
policy templates. 

[c6] 6. The method of claim 5, further comprising applying 
asynchronous, out-of-band communication to transmit 
the query and any policy templates. 

[c7] 7. The method of claim 5, further comprising compress- 
ing each policy template before transmitting to the en- 
forcement point or any of the selected enforcement 
points. 

[c8] 8. The method of claim 1, further comprising forming 
each policy template in a structured document. 

[c9] 9. The method of claim 1, further comprising forming 
each policy template in a mark-up language. 

[do] io. A method to distribute policies, comprising: 

defining a policy template associated with each policy; 
assigning a unique identification (ID) to each policy tem- 
plate; 

storing each policy template and assigned ID; and 
transmitting one of the assigned ID or the policy tem- 
plate to an enforcement point for each policy to be en- 
forced by the enforcement point. 



[c11] 11. The method of claim 10, further comprising identify- 
ing at least one set of parameters to be associated with 
each policy template. 

[d2] 12. The method of claim 11, further comprising trans- 
mitting the one set of parameters to be used in each as- 
sociated policy template for enforcement to the enforce- 
ment point. 

[c13] 13. The method of claim 12, further comprising binding 
the parameters to each associated template. 

[d4] 14. The method of claim 13, further comprising imple- 
menting the policy associated with each policy template. 

[d5] 15. The method of claim 11, further comprising storing 
each one of the at least one set of parameters by name 
and type. 

[d6] 16. The method of claim 10, further comprising querying 
a repository in response to each policy template corre- 
sponding to any transmitted IDs not present at the en- 
forcement point. 

[d7] 17. The method of claim 16, further comprising trans- 
mitting any policy templates to the enforcement point in 
response to a query from the enforcement point includ- 
ing any IDs assigned to the policy templates. 



[d8] 18. The method of claim 17, further comprising applying 
asynchronous, out-of-band communication to query the 
repository and transmit any templates. 

[d9] 19. The method of claim 17, further comprising com- 
pressing each template before transmitting to the en- 
forcement point. 

[c20] 20. The method of claim 10, further comprising com- 
pressing each template before transmitting to the en- 
forcement point. 

[c21] 21. The method of claim 10, further comprising forming 
each policy template in a structured document. 

[c22] 22. The method of claim 10, further comprising forming 
each policy template in a mark-up language. 

[c23] 23. A system to distribute policies, comprising: 

a policy administrator to define policy templates and to 
transmit one of an identification (ID) assigned to a policy 
template or the policy template associated with each 
policy to be enforced; and 

an enforcement point to receive the ID assigned to the 
policy template or the policy template for each policy 
and to enforce each policy. 

[c24] 24. The system of claim 23, wherein each policy admin- 



istrator comprises a processor to transmit one of the ID 
assigned to the policy template or the policy template 
associated with each policy. 

[c25] 25. The system of claim 23, wherein each enforcement 
point comprises: 

a processor to receive the IDs assigned to each policy 
template; and 

a data source to store each policy template for enforce- 
ment and assigned ID, wherein the processor forms and 
transmits a query in response to each policy template 
corresponding to any transmitted IDs not present in the 
data source. 

[c26] 26. The system of claim 23, further comprising a reposi- 
tory to store each policy template and assigned ID. 

[c27] 27. The system of claim 26, further comprising a server 
to interface between each policy administrator, each en- 
forcement point and the repository. 

[c28] 28. A system to distribute policies, comprising: 

means for defining a policy template associated with 
each policy; 

means for assigning a unique identification (ID) to each 
policy template; 

a repository to store each policy template and assigned 



ID; 

means for transmitting one of the assigned ID or the 
policy template for each policy to be enforced; and 
an enforcement point to receive the assigned ID or the 
policy template for each policy and to enforce each pol- 
icy. 

[c29] 29. The system of claim 28, further comprising means 
for binding parameters to each associated policy tem- 
plate for enforcement. 

[c30] 30. The system of claim 28, further comprising means 
for transmitting a query in response to each policy tem- 
plate corresponding to any transmitted IDs not present 
at the enforcement point. 

[c31] 31. The system of claim 28, further comprising means 
for transmitting any policy templates to the enforcement 
point in response to a query from the enforcement point 
including any IDs assigned to the policy templates. 

[c32] 32. The system of claim 31, further comprising means 
for applying asynchronous, out-of-band communication 
to transmit the query and any policy templates. 

[c33] 33. The system of claim 31, further comprising means 
for compressing each policy template before transmis- 
sion to the enforcement point. 



[c34] 34. The system of claim 28, further comprising means 
for forming each policy template in a structured docu- 
ment. 

[c35] 35. A computer-readable medium having computer- 
executable instructions for performing a method, com- 
prising: 

defining a policy template associated with each policy; 
assigning a unique identification (ID) to each policy tem- 
plate; and 

transmitting one of the assigned ID or the policy tem- 
plate to an enforcement point for each policy to be en- 
forced by the enforcement point. 

[c36] 36. The computer-readable medium having computer 
executable instructions for performing the method of 
claim 35, further comprising: 

identifying at least one set of parameters to be associ- 
ated with each policy template; and 
transmitting the one set of parameters to be used in 
each associated policy template for enforcement to the 
enforcement point. 

[c37] 37. The computer-readable medium having computer 
executable instructions for performing the method of 
claim 36, further comprising binding the parameters to 



each associated template. 

[c38] 38. The computer-readable medium having computer 
executable instructions for performing the method of 
claim 35, further comprising implementing the policy 
associated with each policy template. 

[c39] 39. The computer-readable medium having computer 
executable instructions for performing the method of 
claim 35, further comprising querying a repository in re- 
sponse to each policy template corresponding to any 
transmitted IDs not present at the enforcement point. 

[c40] 40. The computer-readable medium having computer 
executable instructions for performing the method of 
claim 35, further comprising transmitting any policy 
templates to the enforcement point in response to a 
query from the enforcement point including any IDs as- 
signed to the policy templates. 

[c41] 4i. The computer-readable medium having computer 
executable instructions for performing the method of 
claim 40, further comprising applying asynchronous, 
out-of-band communication to query the repository and 
to transmit any policy templates. 

[c42] 42. The computer-readable medium having computer 
executable instructions for performing the method of 



claim 35, further comprising compressing each template 
before transmitting to the enforcement point. 

[c43] 43. The computer-readable medium having computer 
executable instructions for performing the method of 
claim 35, further comprising forming each policy tem- 
plate in a structured document. 

[c44] 44. The computer-readable medium having computer 
executable instructions for performing the method of 
claim 35, further comprising forming each policy tem- 
plate in a mark-up language. 



